7.8
CVE-2021-31853
- EPSS 0.03%
- Veröffentlicht 10.11.2021 09:15:07
- Zuletzt bearbeitet 21.11.2024 06:06:21
- Quelle trellixpsirt@trellix.com
- CVE-Watchlists
- Unerledigt
LoginMDE DLL Search Order Hijacking vulnerability
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Drive Encryption Version >= 7.2.0 <= 7.2.10
Mcafee ≫ Drive Encryption Version7.3.0 Update-
Mcafee ≫ Drive Encryption Version7.3.0 Updatehotfix1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.059 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
| trellixpsirt@trellix.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.